AutoPT: How Far Are We from the End2End Automated Web Penetration Testing?